Mixed policy loading system and method for realizing policy management

Abstract

The present invention discloses a mixed strategy loading system. It contains strategy type information describing file, strategy management process defining unit, strategy process executing unit, strategy topological data management unit. The present invention also discloses a method to realize strategy management, said method reading method of extraction from memory, extracting strategy raw data, then reading formatting and global processing method, to proceed formatting and global processing to raw data.

Description

technical field [0001] The invention relates to a network device centralized management technology, in particular to a mixed policy loading system for performing policy services in a centralized manager and a method for realizing policy management. Background technique [0002] With the increasing scale of the network environment, the number of various devices in the network has also increased dramatically, including various routing and switching devices, storage devices, and numerous security devices, such as firewalls, intrusion detection systems (IDS, Intrusion Detection System) etc. [0003] A very important aspect of managing many network devices is to set various operating environment parameters and various action conditions for these devices, which are classified as policy management for devices. [0004] An initial approach to device policy management is direct login to the device or one-to-one remote control through the device's web page. The advantage of this met...

AI Technical Summary

Problems solved by technology

[0008] First of all, the existing centralized manager can only process different policies separately, and cannot realize mixed management of multiple policies at the same time. At the same time, since different policy management modules are developed for different devices, each policy management module independently Policy management. Therefore, when the centralized manager faces a large number of policy requests at the same time, it cannot flexibly respond to different policy requests according to the overall network. The policy management efficiency is low and the system resources are seriously consumed. Secondly, each policy management module in the centralized manager is independent Development and operation make policy expansion lack the necessary capabilities, resulting in the need to re-develop a policy management module for each policy expansion, wasting human resources and high development costs; thirdly, due to the lack of connection and collaboration between different policy management modules, Therefore, the coordination problem formed between different strategies cannot be solved quickly, and because the centralized manager lacks the necessary internal connection structure, it is difficult to integrate the newly developed strategy management module into the original system; in addition, in the strategy management The policy extraction process and formatting process in the module are mixed together. The policy extraction process will mostly occupy other system resources, such as file access, database access, or network access. At the same time, the policy formatting time will also be calculated in Within the use of the entire resource, the two are added together, which makes the occupancy rate of the system resource too high

Images